This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo_zrD94hV4W3NcYmAyDEmx249A.roa
File:                     eo_zrD94hV4W3NcYmAyDEmx249A.roa (raw, json)
Hash identifier:          s5BqjaHuufsUK0Tia+Kpts2gTecu8Hi2Razng7EngD4=
Subject key identifier:   7A:8F:F3:AC:3F:78:85:5E:16:DC:D7:18:98:0C:83:12:6C:76:E3:D0
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019BB616F29D06AE3C00D8F5F0149D3A6C32
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo_zrD94hV4W3NcYmAyDEmx249A.roa
Signing time:             Tue 13 Jan 2026 06:41:55 +0000
ROA not before:           Tue 13 Jan 2026 06:41:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55286
IP address blocks:        151.243.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b6:16:f2:9d:06:ae:3c:00:d8:f5:f0:14:9d:3a:6c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan 13 06:41:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a8ff3ac3f78855e16dcd718980c83126c76e3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:db:90:b1:7f:1f:23:71:07:1a:18:98:07:
                    27:b6:e2:d6:07:c4:73:b7:53:ab:db:39:e8:e1:19:
                    fa:9b:b0:c8:3b:b0:78:da:37:cc:95:0d:06:f4:e1:
                    f7:c9:9f:82:3a:d7:35:7b:2b:01:e0:5f:34:69:b7:
                    16:70:02:db:a7:2d:90:d6:57:79:4b:88:58:a4:5c:
                    7c:fe:e3:65:f4:3e:89:d1:10:c2:e6:92:cf:39:a0:
                    90:98:4a:f5:7c:f6:47:81:b0:a6:93:29:81:eb:4c:
                    f5:ce:93:d2:8f:9a:19:54:6d:a4:31:9a:49:e2:d1:
                    e6:4e:cf:de:b5:41:b5:65:cc:e3:74:2e:36:58:8b:
                    55:c1:99:e0:b3:69:69:97:c5:31:ae:12:88:2f:5d:
                    5e:4b:b8:0d:ff:af:0c:89:cc:46:61:8a:af:5a:a9:
                    c1:a5:3b:7a:e7:3b:93:f9:c4:6f:a2:6e:e1:ff:b7:
                    cf:1b:ad:9b:a8:a0:de:6e:bb:a1:34:06:26:b7:d2:
                    66:19:8c:97:cb:44:9f:f0:1a:8e:c7:40:e5:51:c6:
                    ec:6e:37:0b:fb:57:44:34:36:ff:c6:5e:41:ea:e5:
                    c9:13:ff:b2:b7:ec:56:ed:72:39:7c:83:b6:2e:f3:
                    21:1d:1a:02:ed:78:7a:47:ab:83:7a:05:0d:93:4b:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:F3:AC:3F:78:85:5E:16:DC:D7:18:98:0C:83:12:6C:76:E3:D0
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo_zrD94hV4W3NcYmAyDEmx249A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:9b:a7:a0:70:a1:be:c9:b4:46:7c:15:32:0e:5d:28:76:
         14:64:c0:d8:0d:33:ff:0a:3b:de:b6:c0:69:49:75:d7:d2:f5:
         19:70:b8:55:50:03:3d:7f:b2:92:f9:de:1c:63:64:d0:7c:b4:
         3f:5f:b6:f1:a3:77:bc:81:2f:9e:38:e9:0f:8c:2a:7d:b6:85:
         35:d0:49:78:d6:0c:02:07:02:66:13:34:6f:65:ca:5e:2d:ab:
         b8:85:d7:93:23:30:6c:53:80:a0:ff:9a:5d:c4:e4:d2:44:bc:
         91:39:d9:51:77:2c:cd:b5:08:d0:a3:a7:24:45:a2:3e:79:8f:
         36:50:23:78:29:59:be:a3:45:8f:8b:bc:7c:56:e2:8f:07:df:
         6b:ed:44:4f:20:5a:77:5c:53:e3:3c:6f:84:65:3b:4f:7b:e8:
         aa:7e:fa:7a:c8:ee:99:15:6d:37:d6:2b:27:69:e4:6a:25:f9:
         04:cc:74:43:4a:db:a1:cf:31:34:3a:e5:f7:48:67:7a:6f:5c:
         66:8c:10:f8:67:68:62:cb:05:ef:ac:df:c7:a9:6e:c0:33:24:
         5b:de:3f:54:04:fb:ea:98:44:c6:ee:33:05:42:91:3d:62:f0:
         a9:7b:55:38:c5:e8:c2:d0:7f:78:bb:11:57:36:be:da:94:45:
         26:b9:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:31:27 2026 by rpki-client